Privacy Policy
Data controller: RINO BLANCO, SL (Tax ID B65502072)
Address: Gran Vía no. 6, 4th floor, 28013 Madrid — hello@mymediaconnect.com
Data Protection Officer (DPO): AURIS LEGAL, Paseo de Gràcia 47, 1st floor, 08007 Barcelona
DPO contact: Xavier Saula Adell — xavi@auris.legal
Last updated: October 2025
01. Purpose and scope
This document informs companies, users or potential users of the MyMediaConnect service (including the website, platform, calculator, contact form and newsletter) about how RINO BLANCO processes personal data collected in the course of its activities.
The service is provided exclusively to companies, legal entities or professionals acting for business or professional purposes. It is not directed at individual consumers. However, when personal data of natural persons (such as the client's employees, designated users or professional contacts) are collected, such data shall be treated as "personal data" under the GDPR and applicable Spanish data protection law.
02. Data controller
RINO BLANCO, SL, with the identification and contact details above. You may contact RINO BLANCO, SL directly to exercise your rights or make enquiries, or contact the DPO at the address provided.
03. Purposes, data categories and legal bases
A) Website browsing, contact form, calculator and newsletter
- Handling information requests: name, surname, company, email, message — legal basis: consent of the data subject.
- Calculator and sending results: user-provided data and professional email — legal basis: consent of the data subject.
- Newsletter and commercial communications: email address — legal basis: consent of the data subject.
- Web analytics and cookies: browsing data, device, partially anonymised IP — legal basis: consent (non-essential cookies) and legitimate interest (strictly necessary cookies).
B) MyMediaConnect contracted platform service
When the client subscribes to the platform, the following processing activities apply:
- Management of the client account and designated users: creation, administration, access and identification.
- Service delivery: authentication, permissions management, user management, features, technical support, incidents, training and usage monitoring.
- Invoicing, contract performance and payment management.
- Service improvement, usage analysis, development of new features, security, backups and data recovery.
- Compliance with applicable legal and accounting obligations.
Data processed may include: name and surname, company name, job title, professional email, access credentials, IP address, usage metadata, content uploaded to the service (digital assets, designs, documents) and billing data.
The legal basis is the performance of the contract and compliance with legal obligations.
04. Retention periods
- Contact data / non-clients: up to 2 years from the last contact.
- Platform users: for the duration of the active service and, once terminated, for the period needed to address contractual liabilities or legal obligations.
- Newsletter subscribers: until the data subject requests removal. You may revoke your consent by writing to rgpd@mymediaconnect.com with the subject "unsubscribe".
- Cookies and analytics: as set out in the current cookie policy.
Statutory limitation periods also apply: 3 years (labour infringements), 4 years (Social Security and tax), 5 years (occupational health and safety), 6 years (accounting and commercial), 10 years (tax audits and tax fraud offences).
05. Recipients, processors and international transfers
Data may be shared with hosting providers, CRM platforms, mailing services and analytics providers acting as data processors. All processor relationships comply with GDPR requirements. International transfers outside the EEA are made only with adequate safeguards in place (e.g., standard contractual clauses).
06. Data subject rights
Natural persons whose data are being processed have the following rights under the GDPR:
- Right of access, rectification and erasure.
- Right to restriction of processing and right to object.
- Right to data portability.
- Right to withdraw consent at any time without affecting the lawfulness of prior processing.
- Right not to be subject to solely automated decision-making with legal or significant effects.
To exercise these rights, write to rgpd@mymediaconnect.com or to the DPO (xavi@auris.legal). You may also lodge a complaint with the Spanish Data Protection Authority (AEPD).
07. Data security
RINO BLANCO, SL applies appropriate technical and organisational measures to ensure data security: regular backups, encryption where applicable, access controls for users and providers, and activity audits.
08. User responsibility — accuracy declaration
By providing personal data, the user declares they are over 18 years of age and that all data provided is true, accurate, complete and up to date. The user is responsible for any false or inaccurate data provided and for any direct or indirect damages resulting therefrom.
09. Cookie policy
The website uses cookies and other tracking technologies. Users are informed via a banner. For more information, see our Cookie Policy. For questions, write to rgpd@mymediaconnect.com.
10. CV submissions
CVs received by email will be processed for recruitment purposes and retained for a maximum of two years, after which they will be securely destroyed. Data may be shared with group companies for the same purposes.
11. Changes to this privacy policy
RINO BLANCO, SL reserves the right to amend this Privacy Policy to adapt it to legislative changes or updates to its activities or services. The updated version will be published with the date of last update on this page.